Description
Cross-site scripting (XSS) vulnerability in the Drupal Commons module 7.x-3.x before 7.x-3.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to content creation and activity stream messages.
References
- https://www.drupal.org/node/2194777
- https://www.drupal.org/node/2194877
- 103288 vdb-entry
- commons-drupal-activity-xss(91151) vdb-entry
- 65524 vdb-entry
- 56861 third-party-advisory